@stackbone/cli 0.2.2 → 0.2.3

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.3] - 2026-07-06
+
+### Fixed
+
+- **`stackbone init` (and every other command) could crash with `ERR_MODULE_NOT_FOUND: Cannot find package 'drizzle-orm'`** on some `pnpm dlx`/global-install layouts. The CLI carried a dead "marker import" of `drizzle-kit/api` purely so the bundler would register `drizzle-kit` as a dependency — but that import is loaded eagerly on every CLI boot, and `drizzle-kit/api` itself requires `drizzle-orm` without declaring it as a dependency. On pnpm setups with an isolated `node_modules` layout, `drizzle-kit` can't see `drizzle-orm` even when it's installed right next to it, so the CLI crashed before running any command. Removed the marker import; `drizzle-kit` is now declared explicitly in the build config instead, and the CLI only touches `drizzle-kit` at all when a migration is genuinely being generated (`db migrate create`, or `stackbone dev`'s auto-migrate).
+
 ## [0.2.2] - 2026-07-06
 
 ### Fixed

package/main.js

@@ -38,7 +38,6 @@ import { BinaryReader, BinaryWriter } from "@bufbuild/protobuf/wire";
 import { cancel, intro, isCancel, log, note, outro, select, spinner, text as text$1 } from "@clack/prompts";
 import open$1 from "open";
 import { readMigrationFiles } from "drizzle-orm/migrator";
-import "drizzle-kit/api";
 import { createServer } from "node:net";
 import { create } from "tar";
 import { Readable } from "node:stream";
@@ -2989,7 +2988,7 @@ var DEV_HMAC_SECRET = "dev-stackbone-local-emulator-hmac-secret";
 //#endregion
 //#region ../../libs/runtime/agent-emulator/src/lib/server/contract.ts
 init_src$14();
-var STACKBONE_CLI_BUILD_VERSION = "0.2.2";
+var STACKBONE_CLI_BUILD_VERSION = "0.2.3";
 /**
 * Capabilities the local emulator advertises on `GET /api/contract`, derived
 * from the route registry above so the advertised set and the mounted routes
@@ -3020,7 +3019,11 @@ var buildContractResponse = () => contractResponseSchema.parse({
 });
 //#endregion
 //#region ../../libs/runtime/agent-emulator/src/lib/server/cors.ts
-var DEFAULT_ALLOWED_ORIGINS = ["https://app.stackbone.ai", "http://localhost:*"];
+var DEFAULT_ALLOWED_ORIGINS = [
+	"https://app.stackbone.ai",
+	"https://chat.stackbone.ai",
+	"http://localhost:*"
+];
 var escapeRegex = (input) => input.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
 var compilePattern = (pattern) => {
 	const escaped = escapeRegex(pattern.trim()).replace(/\*/g, "[^/.]+");
@@ -35174,6 +35177,7 @@ is for offline work or when the relay handshake fails.
 The emulator enforces an explicit CORS allowlist (no \`*\`). Default origins:
 
 - \`https://app.stackbone.ai\`
+- \`https://chat.stackbone.ai\`
 - \`http://localhost:*\` (any port; covers any local dev server you run)
 
 Add origins **per-repo** via \`stackbone.config.json\` at the project root
@@ -35185,6 +35189,7 @@ Add origins **per-repo** via \`stackbone.config.json\` at the project root
   "studio": {
     "corsOrigins": [
       "https://app.stackbone.ai",
+      "https://chat.stackbone.ai",
       "https://staging.stackbone.ai",
       "http://localhost:*",
     ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stackbone/cli",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "license": "UNLICENSED",
   "type": "module",
   "bin": {